This issue affects Costifier: through 2026-10-16. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| SFM Software Technologies Inc. | Costifier | unknown |
|
No data.
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Fri, 16 Oct 2026 09:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Active debug code vulnerability in SFM Software Technologies Inc. Costifier allows Exploit Non-Production Interfaces. This issue affects Costifier: through 2026-10-16. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. | |
| Title | Sensitive Information Disclosure Due to Enabled Debug Mode in Production in SFM Software's Costifier | |
| Weaknesses | CWE-489 | |
| References |
| |
| Metrics |
cvssV3_1
|
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: TR-CERT
Published:
Updated: 2026-10-16T08:45:41.731Z
Reserved: 2026-07-13T08:19:51.921Z
Link: CVE-2026-15575
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-10-16T09:17:04.790
Modified: 2026-10-16T09:17:04.790
Link: CVE-2026-15575
Redhat
No data.
OpenCVE Enrichment
No data.
-
CWE-489
Active Debug Code